opensuse Vulnerability Advisory Catalog

Total 405 security vulnerabilities recorded for opensuse software and firmware.

← Back to All Vendors
Component: cscreen

A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local use...

📅 2022-03-16
CVSS 5.3 Dossier →
Component: cscreen

A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-defaul...

📅 2022-03-16
CVSS 5.1 Dossier →
Component: open_build_service

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present user...

📅 2022-03-09
CVSS 8.1 Dossier →
Component: libsolv

Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies funct...

📅 2022-02-21
CVSS 6.5 Dossier →
Component: factory_watchman

A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local...

📅 2022-01-26
CVSS 7.8 Dossier →
Component: factory

A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS o...

📅 2022-01-14
CVSS 5.9 Dossier →
Component: libsolv

Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service....

📅 2021-09-02
CVSS 7.5 Dossier →
Component: libsolv

Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of S...

📅 2021-09-02
CVSS 7.5 Dossier →
Component: libsolv

Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service....

📅 2021-09-02
CVSS 7.5 Dossier →
Component: libsolv

Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service....

📅 2021-09-02
CVSS 7.5 Dossier →
CVE-2019-18906 CRITICAL
Component: cryptctl

A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with acce...

📅 2021-06-30
CVSS 9.8 Dossier →
Component: inn

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE ...

📅 2021-06-10
CVSS 6.8 Dossier →
Component: python-postorius

A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from user...

📅 2021-06-10
CVSS 6.8 Dossier →
Component: libsolv

Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resu...

📅 2021-05-18
CVSS 3.3 Dossier →
Component: factory

A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to esc...

📅 2021-05-05
CVSS 7.8 Dossier →
CVE-2020-8032 MEDIUM
Component: cyrus-sasl

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affe...

📅 2021-02-25
CVSS 6.7 Dossier →
Component: openldap2

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 1...

📅 2021-02-11
CVSS 7.3 Dossier →
CVE-2020-8031 MEDIUM
Component: open_build_service

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to ...

📅 2021-02-11
CVSS 6.3 Dossier →
Component: openldap2

A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux En...

📅 2020-09-01
CVSS 7.7 Dossier →
Component: open_build_service

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows au...

📅 2020-09-01
CVSS 6.5 Dossier →
Component: backports_sle

A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local atta...

📅 2020-08-07
CVSS 8.4 Dossier →
Component: leap

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attac...

📅 2020-06-29
CVSS 7.7 Dossier →
Component: osc

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software ...

📅 2020-06-29
CVSS 7.5 Dossier →
CVE-2020-8024 MEDIUM
Component: hylafax\+

A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local at...

📅 2020-06-29
CVSS 5.3 Dossier →
Page 2 of 17 (405 Total Records)